Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46000C40737111F09F0A93CFDAE4EC9C.roa
File: 46000C40737111F09F0A93CFDAE4EC9C.roa (raw, json)
Hash identifier: ep8/uc/KS7wMx1HiaEMoi6TnL6PUDuQ4/PvO04hXGpA=
Subject key identifier: C8:D7:FF:AA:6D:CC:51:D5:E1:13:54:BE:17:94:ED:0E:E5:65:44:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0190EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46000C40737111F09F0A93CFDAE4EC9C.roa
Signing time: Thu 07 Aug 2025 09:31:19 +0000
ROA not before: Thu 07 Aug 2025 09:31:13 +0000
ROA not after: Thu 11 Sep 2025 09:31:13 +0000
asID: 6079
IP address blocks: 154.217.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102636 (0x190ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 09:31:13 2025 GMT
Not After : Sep 11 09:31:13 2025 GMT
Subject: CN=68947267-cd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:6b:ff:d4:b7:b2:28:91:61:f8:73:e6:ab:
0f:bc:dd:1e:a4:c9:85:64:c1:db:f0:00:dc:bd:71:
99:da:17:49:36:1f:99:54:81:0d:6f:92:d3:8d:5b:
30:d2:91:66:3a:b3:d4:cb:a6:05:83:df:02:89:d7:
a9:c5:3c:95:18:71:f3:78:f3:25:8a:70:58:7b:b2:
3c:15:4a:a5:74:7e:af:fd:f9:b5:5f:15:67:7b:e2:
a4:9e:cf:fe:02:f1:0e:09:95:93:3e:f1:cd:dd:76:
9f:ac:77:42:2e:0e:e2:e1:7a:62:fa:d5:94:f7:5b:
88:a1:e9:08:e3:b1:4c:e3:3b:6c:1f:e4:b6:24:09:
6a:b7:02:5c:b0:3d:42:b0:c6:aa:7d:9c:f0:74:dc:
31:97:85:a1:f3:12:11:a3:50:b9:76:1a:d1:41:87:
ae:75:c6:09:de:1c:be:84:9b:20:c0:a0:32:ab:b2:
bd:54:46:07:34:6b:d1:af:18:46:22:e9:f3:cc:9d:
1f:51:44:7c:cf:82:b9:ae:89:96:50:64:73:c4:67:
4c:c6:83:42:b4:2a:32:c8:b4:eb:09:e5:33:4b:d6:
db:3f:ed:e8:f2:6c:64:f4:c5:4e:99:c6:8a:ca:a2:
12:8f:3a:a3:5a:b0:f5:46:7a:02:71:ec:93:b7:02:
78:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D7:FF:AA:6D:CC:51:D5:E1:13:54:BE:17:94:ED:0E:E5:65:44:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46000C40737111F09F0A93CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.180.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:e1:cb:c0:ab:7b:74:a1:71:c0:c2:d2:76:59:44:03:8c:73:
fc:19:a9:59:f6:bc:75:c3:4e:c0:ef:fb:d0:fb:6e:75:c7:a5:
78:e8:50:aa:7c:ed:f6:2e:5c:bd:56:a9:f1:7b:2b:7c:5f:ce:
d2:0e:db:3e:3e:bf:0a:47:70:ef:a0:5c:89:50:54:c0:3d:3e:
5a:62:c3:2b:0b:13:76:2d:4f:2e:7f:bd:f7:45:ae:ad:02:76:
7c:48:c7:60:30:64:94:17:cc:39:a5:44:ef:9f:d6:a7:bf:91:
91:62:c4:6e:e4:41:33:d7:cb:7d:74:30:e1:26:8b:91:10:d9:
4c:49:ec:b6:45:f5:78:28:5a:12:7a:56:ac:35:89:64:1a:66:
0c:5b:29:d5:54:73:27:e0:b5:c6:b1:b8:ba:22:2b:b7:1d:b1:
80:25:b0:fb:38:0f:1b:84:cd:37:36:c7:8c:5f:82:aa:c2:c0:
dd:b9:a7:f5:a8:66:62:e0:05:41:32:36:d2:a0:88:5a:5f:30:
0b:dc:cf:c6:33:ca:68:69:0f:0b:25:77:68:79:83:d8:f9:70:
fc:8b:78:9b:8c:1a:a0:09:64:b9:75:ed:d4:4e:81:bd:f1:9e:
b5:e8:b4:10:4c:6d:bc:87:dd:c7:6b:17:16:27:15:65:77:fe:
e4:c5:9f:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZDsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODA3MDkzMTEzWhcNMjUwOTExMDkzMTEzWjAYMRYw
FAYDVQQDEw02ODk0NzI2Ny1jZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyYJr/9S3siiRYfhz5qsPvN0epMmFZMHb8ADcvXGZ2hdJNh+ZVIENb5LT
jVsw0pFmOrPUy6YFg98CidepxTyVGHHzePMlinBYe7I8FUqldH6v/fm1XxVne+Kk
ns/+AvEOCZWTPvHN3XafrHdCLg7i4Xpi+tWU91uIoekI47FM4ztsH+S2JAlqtwJc
sD1CsMaqfZzwdNwxl4Wh8xIRo1C5dhrRQYeudcYJ3hy+hJsgwKAyq7K9VEYHNGvR
rxhGIunzzJ0fUUR8z4K5romWUGRzxGdMxoNCtCoyyLTrCeUzS9bbP+3o8mxk9MVO
mcaKyqISjzqjWrD1RnoCceyTtwJ4swIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMjX
/6ptzFHV4RNUvheU7Q7lZUQfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NjAwMEM0MDczNzExMUYwOUYwQTkzQ0ZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmtm0MA0GCSqGSIb3DQEB
CwUAA4IBAQCK4cvAq3t0oXHAwtJ2WUQDjHP8GalZ9rx1w07A7/vQ+251x6V46FCq
fO32Lly9Vqnxeyt8X87SDts+Pr8KR3DvoFyJUFTAPT5aYsMrCxN2LU8uf733Ra6t
AnZ8SMdgMGSUF8w5pUTvn9anv5GRYsRu5EEz18t9dDDhJouRENlMSey2RfV4KFoS
elasNYlkGmYMWynVVHMn4LXGsbi6Iiu3HbGAJbD7OA8bhM03NseMX4KqwsDduaf1
qGZi4AVBMjbSoIhaXzAL3M/GM8poaQ8LJXdoeYPY+XD8i3ibjBqgCWS5de3UToG9
8Z616LQQTG28h93HaxcWJxVld/7kxZ9H
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:48:26 2025 by rpki-client